diff --git a/changelog.md b/changelog.md
--- a/changelog.md
+++ b/changelog.md
@@ -1,3 +1,7 @@
+### 0.6.0.1
+
+* [#167](https://github.com/tweag/webauthn/pull/167) Fix missing file from sdist for testing
+
 ### 0.6.0.0
 
 * [#162](https://github.com/tweag/webauthn/pull/162) Enable MDS blob parsing to handle invalid entries without completely failing to parse
diff --git a/tests/MetadataSpec.hs b/tests/MetadataSpec.hs
--- a/tests/MetadataSpec.hs
+++ b/tests/MetadataSpec.hs
@@ -24,7 +24,7 @@
 golden :: FilePath -> SpecWith ()
 golden subdir = describe subdir $ do
   it "can verify and extract the blob payload" $ do
-    origin <- Text.unpack . Text.strip . decodeUtf8 <$> BS.readFile ("tests/golden-metadata/" <> subdir <> "/origin")
+    origin <- Text.unpack . Text.strip . decodeUtf8 <$> BS.readFile ("tests/golden-metadata/" <> subdir <> "/origin.txt")
 
     certBytes <- BS.readFile $ "tests/golden-metadata/" <> subdir <> "/root.crt"
     let Right [PEM.pemContent -> pem] = PEM.pemParseBS certBytes
diff --git a/tests/golden-metadata/big/blob-with-errors.jwt b/tests/golden-metadata/big/blob-with-errors.jwt
new file mode 100644
# file too large to diff: tests/golden-metadata/big/blob-with-errors.jwt
diff --git a/tests/golden-metadata/big/origin b/tests/golden-metadata/big/origin
deleted file mode 100644
--- a/tests/golden-metadata/big/origin
+++ /dev/null
@@ -1,1 +0,0 @@
-mds.fidoalliance.org
diff --git a/tests/golden-metadata/big/origin.txt b/tests/golden-metadata/big/origin.txt
new file mode 100644
--- /dev/null
+++ b/tests/golden-metadata/big/origin.txt
@@ -0,0 +1,1 @@
+mds.fidoalliance.org
diff --git a/tests/golden-metadata/small/origin b/tests/golden-metadata/small/origin
deleted file mode 100644
--- a/tests/golden-metadata/small/origin
+++ /dev/null
@@ -1,1 +0,0 @@
-EXAMPLE MDS3 SIGNING CERTIFICATE
diff --git a/tests/golden-metadata/small/origin.txt b/tests/golden-metadata/small/origin.txt
new file mode 100644
--- /dev/null
+++ b/tests/golden-metadata/small/origin.txt
@@ -0,0 +1,1 @@
+EXAMPLE MDS3 SIGNING CERTIFICATE
diff --git a/webauthn.cabal b/webauthn.cabal
--- a/webauthn.cabal
+++ b/webauthn.cabal
@@ -1,6 +1,6 @@
 cabal-version: 2.4
 name: webauthn
-version: 0.6.0.0
+version: 0.6.0.1
 license: Apache-2.0
 license-file: LICENSE
 copyright:
@@ -40,14 +40,10 @@
   README.md,
   changelog.md,
   root-certs/**/*.crt,
-  tests/golden-metadata/big/blob.jwt,
-  tests/golden-metadata/big/payload.json,
-  tests/golden-metadata/big/origin,
-  tests/golden-metadata/big/root.crt,
-  tests/golden-metadata/small/blob.jwt,
-  tests/golden-metadata/small/payload.json,
-  tests/golden-metadata/small/origin,
-  tests/golden-metadata/small/root.crt,
+  tests/golden-metadata/**/*.jwt
+  tests/golden-metadata/**/*.json
+  tests/golden-metadata/**/*.crt
+  tests/golden-metadata/**/*.txt
   tests/responses/**/*.json
 
 common sanity